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DETAILED ACTION 

i> This action is in response to Applicants RCE and remarks. Claims 21-53 are presented 
for further examination. 

2> This is a non-final rejection. 

Response to Arguments 

3> Applicant's arguments with respect to claims 21-53 have been considered but are moot 
in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4> Claims 21, 22, 26-28, 30, 32, 37, 38, 41-43, 45, 47, 52 and 53 are rejected under 35 U.S.C § 
103(a) as being unpatentable over Lim et al, U.S Patent No. 6.434.619 ["Lim"], in view of 
Callahan et a4 ? U.S Patent Publication No. 2002I0157023 ["Callahan"]. 
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5> As to claim 21, Lim discloses a method for filtering on-line service information 
provided through a management portal to a customer of customized network services 
provided by resources of a service provider network, comprising: 

applying a display filter to resources of the server provided network, said display filter 
specifying network resources for which the on-line service information is desired by the 
customer [column 4 «lines 46-66» | column 10 «lines 5i-*59»]; and 

executing at least one management information module to generate a portal display of 
on-line service information, wherein said at least one management information module 
operates on only those network resources of said service provider network which have not 
been excluded by said display filter [column 5 «lines i-32» | column 10 «lines 24-59»]. 

Lim does not explicitly disclose utilizing a security filter. 

6> Lim does disclose utilizing authentication measures to allow a user access only to his 
directory (partitioned storage) [column 9 «lines 24-27 and lines 53~57»] and then applying 
appropriate filters [column 10 «lines 43-59»] after the user has been authenticated. But as 
mentioned previously, Lim does not explicitly disclose a security filter. In the same field of 
invention, Callahan is directed towards a system for allowing secure access to data. Callahan 
discloses applying to said service provider network a security filter definable by service 
provider and not the customer, said security filter corresponding to the customer and 
specifying the network resources allocated to that customer [0052, 0054, 0089, 0096 : 
'authenticate filter']. It would have been obvious to one of ordinary skill in the art to 
incorporate Callahan's security filter into Lim's management system to provide a level of 
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security in accessing and viewing network resources. As Lim had already suggested the use 
of authentication procedures in his data accessing system, one would have been particularly 
motivated to provide such Callahan's cascading filter implementation as it would provide an 
efficient, scalable and easy to configure way to manage network transactions [see Callahan, 
0019]. 

7> As to claim 22, Lim and Callahan disclose a method wherein applying said security 
filter comprises: 

applying a customer sub-filter to provide an association of said corresponding 
customer and said network resources contained in said partitioned network allocated to the 
customer [see Lim, column 9 «lines i8-27» | column 10 «lines 24"42» : "...data associated with 
the customer are polled by the system. .."]. 

8> As to claim 26, Lim discloses a method for filtering on-line service information 
presented through a management portal to a customer of customized network services 
provided by resources of a service provider network, comprising: 

partitioning the service provider network into a plurality of partitioned networks 
[column 1 «lines 30-5i» | column 3 «lines 22-29»]; 

allocating one of said partitioned networks to the customer [column 1 «lines 36-5i» | 
column 20 «lines 6i-62» | column 21 «line 28»]; 

providing a plurality of modules each configured to provide a respective portal display 
of on-line service information [column 4 «lines 46-5i»]; 
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storing, in a filter library accessible to the customer, of display filters each configured 
to specify customer-selected network resources to which selected ones of said plurality of 
modules is to be applied [column 4 «lines 46-66» | column 10 «lines 5i-59»]; and 

displaying a portal display of on-line service information generated from application 
of one of said plurality of modules to network resources resulting from application to the 
service provider network of at least one of said display filters [column 5 «lines i-32» | column 
10 «lines 24-59»]. 

Lim discloses a configuration database [column 7 «lines 56-6o»] but does not 
explicitly disclose security filters or storing them in the configuration database accessible by 
the service provider and not the customer. 

9> Lim does disclose utilizing authentication measures to allow a user access only to his 
directory (partitioned storage) [column 9 «lines 24-27 and lines 53'57»] and then applying 
appropriate filters [column 10 «lines 43'59»] after the user has been authenticated. But as 
mentioned previously, Lim does not explicitly disclose a security filter. In the same field of 
invention, Callahan is directed towards a system for allowing secure access to data. Callahan 
discloses applying to said service provider network a security filter definable by service 
provider and not the customer, said security filter corresponding to the customer and 
specifying the network resources allocated to that customer [0052, 0054, 0089, 0096 : 
'authenticate filter']. It would have been obvious to one of ordinary skill in the art to 
incorporate Callahan's security filter into Lim's management system to provide a level of 
security in accessing and viewing network resources. As Lim had already suggested the use 
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of authentication procedures in his data accessing system, one would have been particularly 
motivated to provide such Callahan's cascading filter implementation as it would provide an 
efficient, scalable and easy to configure way to manage network transactions [see Callahan, 
0019]. 

io> As to claim 27, Lim and Callahan disclose a method wherein applying said security 
filter comprises: 

applying a customer sub-filter to provide an association of said corresponding 
customer and said network resources contained in said partitioned network allocated to the 
customer [see Lim, column 9 «lines i8-27» | column 10 «lines 24'42» : "...data associated with 
the customer are polled by the system..."]. 

n> As to claim 28, Lim discloses a customer sub-filter that is configured to filter on at 
least one of a node level and interface level of said service provider network [column 4 «lines 
52-62» I column 5 «lines i-24» : see Lim's interfaces]. 

I2> As to claim 30, Lim discloses specifying an internet protocol interface sub-filter of 
said security filter, said IP interface sub-filter configured to filter on an IP address of a 
network device [column 5 «lines i-24»]. 
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I3> As to claim 32, Lim discloses the method of claim 26 further comprising specifying an 
interface selection sub-filter of said display filter, said interface selection sub-filter 
configured to filter one of a set of at least one network interfaces [column 10 «lines 24-59»]. 

I4> As to claim 37, Lim discloses providing a network health module configured to display 
a status or health report network resources to which said network health module is applied 
[column 1 «line to column 2 «line 3» | column 5 «lines 46-55»], 

15> As to claim 38, Lim discloses storing a network health sub-filter of the display filter, 
said network health sub-filter configured to identify which of said network elements to 
monitor for said status and health report [column 6 «lines i3-32»]. 

i6> As to claim 40, Lim discloses invoking said display filter by invoking said selected 
module [column 5 «lines 7'32»]. 

I7> As to claims 41-43, 45, 47, 52 and 53, as they are merely systems that implement the 
steps of the method of claims 26-28, 30, 32, 37 and 38, they do not teach or further define over 
the claimed limitations. Therefore, claims 41-43, 45, 47, 52 and 53 are rejected for the same 
reasons as set forth for claims 26-28, 30, 32, 37 and 38, supra. 



i8> Claims 29, 39 and 44 are rejected under 35 U.S.C § 103(a) as being unpatentable over 
Lim and Callahan, in further view of Teijido et al, U.S Patent No. 2002(0053020 ["Teijido"]. 
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I9> As to claim 29, Lim and Callahan do disclose utilizing sub-filters [see Callahan, 0052] 
but do not explicitly disclose specifying an internet protocol host sub-filter of said security 
filter, said IP host sub-filter configured to filter on a network name of a network device. 

20> Teijido discloses an internet protocol host sub-filter of said security filter, said IP host 
sub-filter configured to filter on a network name of a network device [0049, 0070 : "...limit 
access to only a predefined specific set of client machines."; "...host id"], It would have been 
obvious to one of ordinary skill in the art to incorporate Teijido's host sub-filter into Lim's 
management system to provide a level of security in accessing and viewing network 
resources. Such an implementation would ensure that the data can be tailored to a specific set 
of client machines. 

2i> As to claim 39, Lim does not explicitly disclose invoking said security filter by parsing 
a customer record in said user configuration database. 

22> Teijido discloses invoking said security filter by parsing a customer record in said user 
configuration database [0105, 0111 where: Teijido discloses checking a user's ASP]. It would 
have been obvious to one of ordinary skill in the art to implement Teijido's user verification 
functionality into Lim's management system to correlate a user with the documents or 
information that he is allowed to access. Such an implementation would provide increased 
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security in Lim's system by preventing users from accessing information that they are not 
allocated. 

23> As to claim 44, as it does not teach or further define over the previously claimed 
limitations, it is rejected for the reasons set forth for claim 29, supra, 

24> Claims 23-25, 31, 33-36, 46 and 48-51 are rejected under 35 U.S.C § 103(a) as being 
unpatentable over Lim and Callahan, in further view of Rangarajan et al, U.S Patent No. 
6.275.225, ["Rangarajan"]. 

25> As to claim 23, Lim and Callahan do not explicitly disclose an alarm module. 

26> Rangarajan discloses an alarm module configured to display information regarding 
alarm conditions occurring in said non-excluded resources [Figure 5 «item 509)) | column 5 
«lines 5o-53» | column 10 «lines 6-io» : wherein the devices correspond to network resources 
and clients are only able to work with resources that have been assigned to them (excluded 
resources)]. Furthermore, Lim discloses resources that can only be utilized by customers with 
the property authority. It would have been obvious to one of ordinary skill in the art to 
incorporate Rangarajan's alarm module into Lim's management system to allow users to 
select nodes that would enable monitoring of alarm conditions in the network resources to 
which they only have access. One would have motivated to perform such an implementation 
enable users to more efficiently manage resources. 
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27> As to claim 24, Lim and Callahan do not explicitly disclose a topology module 
configured to display at least a graphical representation of network elements and connections 
between said network elements included in said non-excluded network resources. 

28> Rangarajan discloses providing a topology module configured to display at least a 
graphical representation of network elements and connections between said network 
elements [Figure 9 «item 905» | column 6 «lines 27'36» | column 7 «lines 2i-24»]. 
Furthermore, Lim discloses resources that can only be utilized by customers with the 
property authority. It would have been obvious to one of ordinary skill in the art to 
incorporate Rangarajan's topology module into Lim's management system to allow users to 
more clearly see a map of the configuration of network resources to which they only have 
access in the network. One would have been motivated to perform such an implementation 
as such a map would allow users to more effectively manage the network resources. 

29> As to claim 25, Lim and Callahan do not explicitly disclose a network health module 
configured to display a status or health report of said non-excluded network resources. 

30 Rangarajan discloses a network health module configured to display a status or health 
report of said non-excluded network resources [Figure 9 «item 907» : "critical, major, 
minor.."]. It would have been obvious to one of ordinary skill in the art to incorporate 
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Rangarajan's health module into Lim's data access system to allow users to keep track and 
remotely monitor network resources as needed. 

3i> As to claim 31, Lim and Callahan do disclose utilizing sub-filters [see Callahan, 0052], 
but do not explicitly disclose a node selection sub-filter. 

32> Rangarajan discloses a node selection sub-filter of said display filter, said node 
selection sub-filter configured to filter on network nodes of the service provider network 
[column 6 «lines 27'33» | column 7 «lines io-i4»]. It would have been obvious to one of 
ordinary skill in the art to incorporate Rangarajan's node filtering functionality into Lim's 
management system to enable users to manage network devices through a user selected view 
of the nodes in the network. 

33> As to claim 33, Lim and Callahan do not explicitly disclose an alarm module. 

34> Rangarajan discloses an alarm module configured to display alarm conditions in 
network resources to which said alarm module is applied [Figure 5 «item 509» | column 10 
«lines 6-io» : wherein the devices correspond to network resources]. It would have been 
obvious to one of ordinary skill in the art to incorporate Rangarajan's alarm module into 
Lim's management system to allow users to select nodes that would enable monitoring of 
alarm conditions in the network resources. One would have motivated to perform such an 
implementation enable users to more efficiently manage resources. 
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35> As to claim 34, Lim and Callahan do not explicitly disclose an alarm sub-filter. 

36> Rangarajan discloses storing an alarm sub-filter of the display filter, said alarm sub- 
filter providing filtering capability of a display of alarm categories [column 6 «lines 2y-^6» | 
column 7 «lines 37~6i»: "selected fault list"]. It would have been obvious to one of ordinary 
skill in the art to incorporate Rangarajan's alarm sub-filter into Lim's management system to 
enable users to select specific faults that they wish to keep track of in their management 
system. 

37> As to claim 35, Lim and Callahan do not explicitly disclose providing a topology 
module. 

38> Rangarajan discloses providing a topology module configured to display at least a 
graphical representation of network elements and connections between said network 
elements [Figure 9 «item 905» | column 6 «lines 27'36» | column 7 «lines 2i-24»]. It would 
have been obvious to one of ordinary skill in the art to incorporate Rangarajan's topology 
module into Lim's management system to allow users to more clearly see a map of the 
configuration of network resources in the network. One would have been motivated to 
perform such an implementation as such a map would allow users to more effectively 
manage the network resources. 
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39> As to claim 36, Lim and Callahan do not explicitly disclose storing a topology map 
sub-filter. 

40> Rangarajan discloses storing a topology map sub-filter of the display filter, said 
topology map sub-filter configured to identify which of said network elements and network 
element connections to include in said topology map [Figure 9 «item 905» | column 6 «lines 
27'36» I column 7 «lines 21-24 and 37-6i»]. It would have been obvious to one of ordinary skill 
in the art to incorporate Rangarajan's topology sub-filter into LinVs management system to 
allow users to control over what network devices are seen on a map of the network. One 
would have been motivated to perform such an implementation as such a map would allow 
users to more effectively manage the network resources. 

4i> As to claims 46 and 48-51, as they are merely systems that implement the steps of the 
method of claims 31 and 33-36, they do not teach or further define over the claimed 
limitations. Therefore, claims 46 and 48-51 are rejected for the same reasons as set forth for 
claims 31 and 33-36, supra. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Dohm Chankong whose telephone number is (571)272-3942. 
The examiner can normally be reached on 8:30AM - 5:30PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glenton Burgess can be reached on (571)272-3949. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status information 
for unpublished applications is available through Private PAIR only. For more information 
about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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